| Package | Affected versions | Patched versions |
|---|---|---|
| paramiko | ≥ 1.5.1, < 2.0.9≥ 2.1.0, < 2.1.6≥ 2.2.0, < 2.2.4≥ 2.3.0, < 2.3.3≥ 2.4.0, < 2.4.2 | 2.0.92.1.62.2.42.3.32.4.2 |
| paramiko | = 1.17.6= 1.18.5= 2.0.8= 2.1.5= 2.2.3= 2.3.2= 2.4.1 | |
| ansible tower | = 3.3 | |
| virtualization host | = 4.0 |
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free